$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/657f8682-de8b-3ad4-9a97-6a6c03122181.roa File: 657f8682-de8b-3ad4-9a97-6a6c03122181.roa (raw, json) Hash identifier: cVye5wkOP+ddpWryzbwC1zpxXSxrMSMWUQCkST6AdYw= Subject key identifier: 31:7E:17:26:D1:AF:AD:30:A7:AD:6C:9E:16:51:0B:F5:20:86:9C:F8 Certificate issuer: /CN=9b5de5e9-14a1-4521-b0e7-1db468c0b09b Certificate serial: 010D0C9F4328584DC5659B50A74E38BAA9D3B280 Authority key identifier: D7:C5:03:1B:51:85:42:FD:EC:B4:A6:16:B9:1C:45:74:BE:97:4E:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/657f8682-de8b-3ad4-9a97-6a6c03122181.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 395631 IP address blocks: 23.131.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:9b:50:a7:4e:38:ba:a9:d3:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b5de5e9-14a1-4521-b0e7-1db468c0b09b Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=07e8aed7-4760-4ebf-b2b3-5ab4a3d4fdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:84:9b:2f:95:7d:77:cc:71:6c:36:d6:c0:df: df:0d:b3:ea:ae:d3:11:78:02:15:cc:7a:5b:b3:4a: 37:4b:59:80:c3:76:db:e1:d0:76:2e:b5:b5:de:0d: af:e4:c5:53:34:ae:3d:f1:43:1d:a5:86:8a:92:04: 0a:fa:c6:7b:b3:ac:87:1b:d5:44:7a:45:ab:25:e8: 4f:30:36:a2:c8:3d:ec:2f:46:22:fe:cd:35:69:5a: 59:69:12:97:d6:5c:2e:8b:f9:1b:52:53:eb:4a:8a: c7:a9:13:b7:7b:d8:f4:17:60:85:5f:15:ed:06:9e: 86:81:32:8c:84:f2:37:76:a7:53:91:1f:dc:a3:5f: 80:da:86:05:40:06:27:db:01:d5:6f:c3:cf:03:bf: b3:9e:b6:12:d8:3b:b2:f6:96:e3:d3:9d:c5:e7:4a: 0d:86:ad:08:44:e9:35:5e:24:9b:19:db:d0:bf:5e: c6:b1:3d:f6:5c:85:8f:f2:6c:02:d1:d8:fe:44:29: 5b:2b:b5:1d:f1:cc:e5:43:d0:03:bf:e2:1c:07:92: 33:50:9d:2c:9f:56:42:90:3f:81:a1:6b:67:8e:4e: 3a:7d:04:61:d8:12:1c:d2:bd:83:31:a2:bd:85:8b: 6f:92:f4:7f:5b:e2:3a:b6:fb:48:17:eb:1d:b9:0a: 14:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7E:17:26:D1:AF:AD:30:A7:AD:6C:9E:16:51:0B:F5:20:86:9C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/657f8682-de8b-3ad4-9a97-6a6c03122181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.crl X509v3 Authority Key Identifier: keyid:D7:C5:03:1B:51:85:42:FD:EC:B4:A6:16:B9:1C:45:74:BE:97:4E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.cer sbgp-ipAddrBlock: critical IPv4: 23.131.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:dd:e0:59:a5:2b:eb:e4:93:78:ee:20:7d:15:6e:b2:5d:b4: 21:aa:e3:34:16:90:31:99:3a:19:ae:63:9b:81:11:9e:71:e8: 2d:3d:6b:91:67:38:b1:12:43:e3:4e:f4:7f:f1:7e:c6:27:b5: e8:ec:f0:62:db:d3:36:f5:c0:24:ae:ee:44:7f:b5:cc:68:06: d6:d9:f6:fc:92:7c:b5:b1:d5:87:d0:8b:63:84:b7:2d:63:19: 03:8f:be:3b:b7:56:7e:ab:7c:6d:34:54:c7:cd:0a:97:71:ea: 48:1e:91:65:1d:99:d7:cf:6c:95:5e:3e:cc:a5:fa:6c:a9:97: d9:4f:ae:25:12:84:ce:45:98:ef:19:9d:48:77:1b:77:66:95: f3:60:85:ab:62:6d:22:de:a9:dd:09:fb:4b:74:9a:99:76:26: ff:a7:6b:7f:cb:92:cb:74:46:a1:36:3b:43:a6:4d:a1:b7:68: 76:1c:0d:39:15:fe:f5:d7:ca:a3:b4:5e:1e:f6:a1:cb:a4:a1: 2c:e4:ee:b0:17:ce:92:8a:91:1e:ad:42:0f:20:d3:46:f1:73: 4e:d1:64:8a:39:f3:91:65:0e:73:a0:f6:0b:8b:20:0d:e7:42: ac:f3:ec:00:00:95:d6:1e:78:55:49:2e:b2:ec:d5:0e:28:8f: 9c:05:bd:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZZtQp044uqnTsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI1ZGU1ZTktMTRhMS00NTIxLWIwZTctMWRiNDY4YzBi MDliMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk MDdlOGFlZDctNDc2MC00ZWJmLWIyYjMtNWFiNGEzZDRmZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYSbL5V9d8xxbDbWwN/fDbPqrtMReAIVzHpb s0o3S1mAw3bb4dB2LrW13g2v5MVTNK498UMdpYaKkgQK+sZ7s6yHG9VEekWrJehP MDaiyD3sL0Yi/s01aVpZaRKX1lwui/kbUlPrSorHqRO3e9j0F2CFXxXtBp6GgTKM hPI3dqdTkR/co1+A2oYFQAYn2wHVb8PPA7+znrYS2Duy9pbj053F50oNhq0IROk1 XiSbGdvQv17GsT32XIWP8mwC0dj+RClbK7Ud8czlQ9ADv+IcB5IzUJ0sn1ZCkD+B oWtnjk46fQRh2BIc0r2DMaK9hYtvkvR/W+I6tvtIF+sduQoUvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDF+FybRr60wp61snhZRC/Ughpz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YjVk ZTVlOS0xNGExLTQ1MjEtYjBlNy0xZGI0NjhjMGIwOWIvNjU3Zjg2ODItZGU4Yi0z YWQ0LTlhOTctNmE2YzAzMTIyMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWI1ZGU1ZTktMTRhMS00NTIxLWIw ZTctMWRiNDY4YzBiMDliLzliNWRlNWU5LTE0YTEtNDUyMS1iMGU3LTFkYjQ2OGMw YjA5Yi5jcmwwHwYDVR0jBBgwFoAU18UDG1GFQv3stKYWuRxFdL6XTlkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YjVkZTVlOS0xNGExLTQ1MjEtYjBlNy0xZGI0 NjhjMGIwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4OwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbd4FmlK+vkk3juIH0VbrJdtCGq4zQWkDGZOhmuY5uBEZ5x6C09a5Fn OLESQ+NO9H/xfsYntejs8GLb0zb1wCSu7kR/tcxoBtbZ9vySfLWx1YfQi2OEty1j GQOPvju3Vn6rfG00VMfNCpdx6kgekWUdmdfPbJVePsyl+mypl9lPriUShM5FmO8Z nUh3G3dmlfNghatibSLeqd0J+0t0mpl2Jv+na3/Lkst0RqE2O0OmTaG3aHYcDTkV /vXXyqO0Xh72ocukoSzk7rAXzpKKkR6tQg8g00bxc07RZIo585FlDnOg9guLIA3n Qqzz7AAAldYeeFVJLrLs1Q4oj5wFvfc= -----END CERTIFICATE-----Generated at Wed May 13 15:25:46 2026 by rpki-client